diff --git a/.github/renovate.json b/.github/renovate.json
index 57123523..ed68ac07 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -2,6 +2,7 @@
   "extends": [
     "config:base",
     ":dependencyDashboard",
+    "helpers:pinGitHubActionDigests",
     "github>msfjarvis/shared-workflows//renovate/automerge"
   ],
   "packageRules": [